NovaVoice

GDPR overview

There is no GDPR implementation to report. Across the nine pages collected, in the visible text and in the archived HTML alike, the words GDPR, CCPA, data processing agreement and subprocessor do not appear once. This is silence rather than a refusal: the site neither claims compliance nor denies it. The privacy policy, last updated on 22 November 2025, names no legal basis, no data subject rights, no supervisory authority, no Article 27 representative and no data protection officer, and describes international transfers only as subject to adequate controls. The publisher, Xware VC LLP, gives Astana, Kazakhstan as its country, and the terms are governed by Kazakh law. Those terms do grant a 14-day consumer right of withdrawal, worded in a European style, but cite no regulation. Privacy questions go to one generic address, hello@novavoice.app.

Who owns the data?

The publisher, Xware VC LLP, is the controller named in the privacy policy. It collects your email address, your name and usage data, and states that it may share them with service providers, corporate affiliates, business partners, other users in public areas of the service, and any acquirer in a merger or asset sale. Neither the terms nor the privacy policy say who owns dictated text or captured audio: the question is simply not addressed. You may view, correct or delete your personal data from the account settings or by writing to hello@novavoice.app, though the company reserves the right to keep records where a legal obligation applies.

Reuse rights

The terms place no restriction on what you do with the text NovaVoice produces for you: dictated and reformatted output is inserted straight into your own applications, and no licence, attribution or approval clause covers it. What the terms do prohibit is reselling access, sharing account credentials, using the tool to power third-party services, and extracting data programmatically. On the vendor side, the privacy policy allows personal data to be used to run and improve the service, manage accounts and billing, contact you, send marketing about similar products (which you may decline), and analyse usage. Training AI models on customer content is never mentioned, in either direction, and no opt-out is documented.

Data retention & training

Hosting summary

NovaVoice publishes no hosting country and no hosting region for its cloud service. The only clear statement is a comparative one: the cloud version processes audio on NovaVoice infrastructure, while the on-premise version runs the processing server inside the customer's own data centre, private cloud or air-gapped network, where, in the vendor's words, audio never leaves the network. The privacy policy mentions international transfers only in generic terms, promising adequate controls without naming a mechanism or a jurisdiction. No hosting certification such as SOC 2 or ISO 27001 is claimed anywhere; HIPAA appears once, as a regulation that may apply to a customer, never as a certification held by the vendor. For information, the marketing site itself resolves to an IP address geolocated in Moscow, Russia, on AS9123 JSC TIMEWEB. That describes where the website is served from, not where customer audio is processed, on which the vendor says nothing.